CVE-2026-57965: Enterprise Linux: tamsayı taşması

Açıklama (NVD)

A flaw was found in spice-vdagent. A malicious or compromised SPICE host can trigger an integer overflow by sending a specially crafted message. This vulnerability can lead to a heap buffer overflow, causing the spice-vdagent daemon to crash and resulting in a Denial of Service (DoS) for the virtual machine. This issue requires the SPICE host to be untrusted or compromised for exploitation.

Özet bilgiler

Ürün

Redhat Enterprise Linux

CVSS v3.1

5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

EPSS

%0,11 (yüzdelik 1)

CWE

CWE-190

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• access.redhat.com
• bugzilla.redhat.com
• CWE-190